ASB-A-483126552

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-483126552.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-483126552
Aliases
  • A-483126552
  • CVE-2026-28590
Published
2026-09-01T00:00:00Z
Modified
2026-09-09T15:15:54Z
Summary
[none]
Details

In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/55c96018e4b47ef96f52d8a5696922e406228051"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "271728793105840462004511016695466342578",
                    "225609580092066819701652255578843755678",
                    "22922858791848983077262719492895293973",
                    "152498003252465324642574777168091341984",
                    "216745401857420517312531043344733948986",
                    "90838428996419478778671093826674660957",
                    "243196010163955082557022457785169536792",
                    "317720922677993995672213295042643950392",
                    "207797382147679906680006053699750546132",
                    "327527209252534395061162274218718959038"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-0a9390a7",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/55c96018e4b47ef96f52d8a5696922e406228051",
            "target": {
                "file": "system/stack/smp/smp_act.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "147569425686700366395963546006565883856",
                "length": 1657
            },
            "id": "ASB-A-483126552-354d1017",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/55c96018e4b47ef96f52d8a5696922e406228051",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_br_process_pairing_command"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "86764226596347865348432816603149685984",
                    "161097112149183409165787234507742167025",
                    "213699991303034784109973065466101312903",
                    "249740772832576225816719541675367489042",
                    "109505208871267257697989523649674825808",
                    "45369645933237400697698398269393156596",
                    "109805789430698158980162851535233555540",
                    "104977839078244004443455012989798890611",
                    "207441759515379760488362636768919980610",
                    "103892998103329118678544141750103958297",
                    "53501700396871967651513741325367804457",
                    "79495308886942340417934240217351567072",
                    "184453942345208254067887019984674327516",
                    "309094803839514178290448501967277754525",
                    "155147796383463013278519465225276501706",
                    "270510824252028817311798994669172011428",
                    "327498904809171870277996895778112889599",
                    "170623847821132023358134909997318306709",
                    "253628266597398983955803310799548578362",
                    "134934658894304695959025214296564002905",
                    "161119824754409469748669496743747523073",
                    "136473264600520296339627402409068496732"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-676a33ac",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/55c96018e4b47ef96f52d8a5696922e406228051",
            "target": {
                "file": "system/stack/btm/btm_sec.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "267638895910126231914210278309422172045",
                    "261405046960114968201645490089994088921",
                    "10190324826433400101033749478414549393",
                    "50327157874776121790416571301689166184",
                    "35816180047017180915001558265307802652",
                    "256991888501584743060455315844846462580",
                    "252084569021344075786405264812189196814",
                    "320601807856400859809009491767313297018",
                    "265020486729665894094642706589495593735"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-70029a1e",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/55c96018e4b47ef96f52d8a5696922e406228051",
            "target": {
                "file": "system/test/mock/mock_stack_btm_sec.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "224635885085920797167335152565292432852",
                "length": 2978
            },
            "id": "ASB-A-483126552-756873d1",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/55c96018e4b47ef96f52d8a5696922e406228051",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_proc_pair_cmd"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "106342303153935114778231591765251715760",
                    "53681047143386442598105975382315739841",
                    "148824137729132206863767450366970425982"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-ec18e01c",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/55c96018e4b47ef96f52d8a5696922e406228051",
            "target": {
                "file": "system/test/mock/mock_stack_btm_sec.h"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "305894365424055097536170433205414719766",
                    "333292156982917463854674169552249061778",
                    "61004863660661527932340438501046196646",
                    "122973132083122907693079866952209180931"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-f1d37d54",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/55c96018e4b47ef96f52d8a5696922e406228051",
            "target": {
                "file": "system/stack/btm/btm_sec.h"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "339814753100636821388583686807178033920",
                "length": 219
            },
            "id": "ASB-A-483126552-fc5d04ca",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/55c96018e4b47ef96f52d8a5696922e406228051",
            "target": {
                "file": "system/stack/btm/btm_sec.cc",
                "function": "get_min_enc_key_size"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483126552.json"
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "257222828027449150134908189772737529654",
                    "207658163299153495115088968746552164626",
                    "99918253093164795553296891349906785563"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-08bb923b",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf",
            "target": {
                "file": "system/test/mock/mock_stack_btm_sec.h"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "278196325094334244570338682183608638552",
                    "289330826787646885310593457370197561822",
                    "221955289329583986989408856142092082618",
                    "252414358705909142632049428339349184654"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-5473ddd8",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf",
            "target": {
                "file": "system/stack/btm/btm_sec.h"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "11850634582731050326618016797364214351",
                    "127236237772549527767720263286933026135",
                    "38272569658039269757009750315427877074",
                    "99637569060360202894404374414597787783",
                    "264729383410382451336090117739210080716",
                    "40678912310281295296791014309624324667",
                    "121400932267880954554642548314905927303",
                    "56642656139399091506259853598867312430",
                    "102297345811940533198866128946583198654",
                    "54467472576424663897339453388520749442",
                    "30905470143638193075752314914403985810",
                    "51690577158058870106773186319585672128",
                    "40678912310281295296791014309624324667",
                    "244527912597803253585287043970882826430",
                    "327109521397995379649710817055625084053",
                    "22309438497343224494140720437562349693",
                    "326573605233816466028561915703790826791",
                    "230427094854419478144331942719222009119",
                    "280428944962553107450830130491115867735"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-669000a6",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf",
            "target": {
                "file": "system/stack/btm/btm_sec.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "223686832906941518132862801260572790598",
                    "146883344000281372816597313367013526082",
                    "291607126589978296692164008483920165137",
                    "152498003252465324642574777168091341984",
                    "216745401857420517312531043344733948986",
                    "90838428996419478778671093826674660957",
                    "243196010163955082557022457785169536792",
                    "113212041184632025995212531598357727678",
                    "54469357391385370306153574358313886042",
                    "87420151342778965471377926056442457563"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-733df8d6",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf",
            "target": {
                "file": "system/stack/smp/smp_act.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "198456641449914446105480075965412093507",
                "length": 2580
            },
            "id": "ASB-A-483126552-8b683e0d",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_proc_pair_cmd"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "266972504125866722056711361774162416767",
                "length": 752
            },
            "id": "ASB-A-483126552-9e3f30a4",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf",
            "target": {
                "file": "system/stack/btm/btm_sec.cc",
                "function": "read_encryption_key_size_complete_after_key_refresh"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "184344843530879696828644481488457341207",
                "length": 1507
            },
            "id": "ASB-A-483126552-d2947faa",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_br_process_pairing_command"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "110203024110968845843093316635371890523",
                    "92128923971131757005620372212034629691",
                    "1335537520147480287372294592749778752",
                    "218413707177187165984355030720478286002",
                    "115065671609051743331320025820314234541",
                    "340071283757007507722307093863701108841",
                    "35669209941639716959685709531791555996",
                    "61005768853155320726347277660215594680",
                    "237416612326465917045050365914127198789"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-dbda7a8e",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf",
            "target": {
                "file": "system/test/mock/mock_stack_btm_sec.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "48775803021177915915291092348626814936",
                "length": 1272
            },
            "id": "ASB-A-483126552-f68ca9d5",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1ba05a45a1caf7e078f81754bdd616ed8eb269bf",
            "target": {
                "file": "system/stack/btm/btm_sec.cc",
                "function": "read_encryption_key_size_complete_after_encryption_change"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483126552.json"
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/cac72dd3406cc845caf10e06d8821be2c5c899ca"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "339814753100636821388583686807178033920",
                "length": 219
            },
            "id": "ASB-A-483126552-19a6c80c",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/cac72dd3406cc845caf10e06d8821be2c5c899ca",
            "target": {
                "file": "system/stack/btm/btm_sec.cc",
                "function": "get_min_enc_key_size"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "223686832906941518132862801260572790598",
                    "146883344000281372816597313367013526082",
                    "291607126589978296692164008483920165137",
                    "152498003252465324642574777168091341984",
                    "216745401857420517312531043344733948986",
                    "90838428996419478778671093826674660957",
                    "243196010163955082557022457785169536792",
                    "113212041184632025995212531598357727678",
                    "54469357391385370306153574358313886042",
                    "87420151342778965471377926056442457563"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-221ac1f5",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/cac72dd3406cc845caf10e06d8821be2c5c899ca",
            "target": {
                "file": "system/stack/smp/smp_act.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "88173733032917689715117050352638694781",
                "length": 3086
            },
            "id": "ASB-A-483126552-64bb6698",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/cac72dd3406cc845caf10e06d8821be2c5c899ca",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_proc_pair_cmd"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "70374654179439931586408675164358236901",
                    "161097112149183409165787234507742167025",
                    "213699991303034784109973065466101312903",
                    "249740772832576225816719541675367489042",
                    "109505208871267257697989523649674825808",
                    "45369645933237400697698398269393156596",
                    "109805789430698158980162851535233555540",
                    "104977839078244004443455012989798890611",
                    "207441759515379760488362636768919980610",
                    "103892998103329118678544141750103958297",
                    "159918703712071970384667308661035627279",
                    "145005423277968017272959748795078112442",
                    "201304355637513578549282718735323015384",
                    "309094803839514178290448501967277754525",
                    "155147796383463013278519465225276501706",
                    "270510824252028817311798994669172011428",
                    "327498904809171870277996895778112889599",
                    "170623847821132023358134909997318306709",
                    "253628266597398983955803310799548578362",
                    "134934658894304695959025214296564002905",
                    "161119824754409469748669496743747523073",
                    "238080396195752855508155498670342237660"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-79908d10",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/cac72dd3406cc845caf10e06d8821be2c5c899ca",
            "target": {
                "file": "system/stack/btm/btm_sec.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "224189461566515395037823205223826672681",
                "length": 1500
            },
            "id": "ASB-A-483126552-b93cd2f5",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/cac72dd3406cc845caf10e06d8821be2c5c899ca",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_br_process_pairing_command"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "245220526570390561052530303831740933994",
                    "207658163299153495115088968746552164626",
                    "99918253093164795553296891349906785563"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-d0f66f3f",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/cac72dd3406cc845caf10e06d8821be2c5c899ca",
            "target": {
                "file": "system/test/mock/mock_stack_btm_sec.h"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "110203024110968845843093316635371890523",
                    "166968749927907602674851967215417654553",
                    "84111204567402794094242322500094050996",
                    "11765413620818715602376423412583263613",
                    "11604042890685219466069630445640502238",
                    "270450587907842398072359443334440573656",
                    "53908254458217485740893345560913344904",
                    "292818041892644049195622513079235750147",
                    "246510696997476929393463188729618575161"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-d1418d22",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/cac72dd3406cc845caf10e06d8821be2c5c899ca",
            "target": {
                "file": "system/test/mock/mock_stack_btm_sec.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "278196325094334244570338682183608638552",
                    "323941653632268518590481582869783141299",
                    "87650321081362981564901451558628620348",
                    "239727348550601960884147018343325436796"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-e07115b3",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/cac72dd3406cc845caf10e06d8821be2c5c899ca",
            "target": {
                "file": "system/stack/btm/btm_sec.h"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483126552.json"
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/83c325b8dba483f0fb80ec231492571adf1ecfa4"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "110203024110968845843093316635371890523",
                    "166968749927907602674851967215417654553",
                    "84111204567402794094242322500094050996",
                    "11765413620818715602376423412583263613",
                    "338223593755906625487228117083325494648",
                    "273887221221264922439945641653231848996",
                    "169126523932887888703319726349868616923",
                    "266427285960886676694009317778825107113",
                    "246510696997476929393463188729618575161"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-103ddfd3",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/83c325b8dba483f0fb80ec231492571adf1ecfa4",
            "target": {
                "file": "system/test/mock/mock_stack_btm_sec.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "245220526570390561052530303831740933994",
                    "207658163299153495115088968746552164626",
                    "99918253093164795553296891349906785563"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-2a690ef6",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/83c325b8dba483f0fb80ec231492571adf1ecfa4",
            "target": {
                "file": "system/test/mock/mock_stack_btm_sec.h"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "331477219685869420648446910916181220475",
                "length": 2822
            },
            "id": "ASB-A-483126552-33b2ba64",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/83c325b8dba483f0fb80ec231492571adf1ecfa4",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_proc_pair_cmd"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "339814753100636821388583686807178033920",
                "length": 219
            },
            "id": "ASB-A-483126552-5867aa6a",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/83c325b8dba483f0fb80ec231492571adf1ecfa4",
            "target": {
                "file": "system/stack/btm/btm_sec.cc",
                "function": "get_min_enc_key_size"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "113104038756898251139189659000725183764",
                    "326615216229557378414186404076678498997",
                    "266591517448360823550701450055876240143",
                    "120599188198513471975465061475685315316"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-5adb47a1",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/83c325b8dba483f0fb80ec231492571adf1ecfa4",
            "target": {
                "file": "system/stack/btm/btm_sec.h"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "223686832906941518132862801260572790598",
                    "146883344000281372816597313367013526082",
                    "291607126589978296692164008483920165137",
                    "152498003252465324642574777168091341984",
                    "216745401857420517312531043344733948986",
                    "90838428996419478778671093826674660957",
                    "243196010163955082557022457785169536792",
                    "113212041184632025995212531598357727678",
                    "54469357391385370306153574358313886042",
                    "87420151342778965471377926056442457563"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-73d8d78c",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/83c325b8dba483f0fb80ec231492571adf1ecfa4",
            "target": {
                "file": "system/stack/smp/smp_act.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "70374654179439931586408675164358236901",
                    "161097112149183409165787234507742167025",
                    "213699991303034784109973065466101312903",
                    "249740772832576225816719541675367489042",
                    "109505208871267257697989523649674825808",
                    "45369645933237400697698398269393156596",
                    "109805789430698158980162851535233555540",
                    "104977839078244004443455012989798890611",
                    "207441759515379760488362636768919980610",
                    "103892998103329118678544141750103958297",
                    "159918703712071970384667308661035627279",
                    "145005423277968017272959748795078112442",
                    "201304355637513578549282718735323015384",
                    "309094803839514178290448501967277754525",
                    "155147796383463013278519465225276501706",
                    "270510824252028817311798994669172011428",
                    "327498904809171870277996895778112889599",
                    "170623847821132023358134909997318306709",
                    "253628266597398983955803310799548578362",
                    "134934658894304695959025214296564002905",
                    "161119824754409469748669496743747523073",
                    "197265793101465129974195384450590362761"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-7f5d241e",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/83c325b8dba483f0fb80ec231492571adf1ecfa4",
            "target": {
                "file": "system/stack/btm/btm_sec.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "224189461566515395037823205223826672681",
                "length": 1500
            },
            "id": "ASB-A-483126552-b174e021",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/83c325b8dba483f0fb80ec231492571adf1ecfa4",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_br_process_pairing_command"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483126552.json"
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-09-01

Affected versions

Other
14

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e0894cd327af6382167a6b19dec8c232f4094bb0"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "286682206206174993450191801991539996599",
                    "326045276227079160830960819021212032497",
                    "297975451756967117223907766201104085187",
                    "170484985054531131756146363378268871442",
                    "4435882540418933981625632444782877057",
                    "162162056528949516083341341676403941949",
                    "221036635719820544350112492027116296633",
                    "247402141000719663858709685035382708690",
                    "279802214514372862701612994943032066922",
                    "291936301309461040474022833589107339742",
                    "81256435319807649245794902198893374635"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-29edf733",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e0894cd327af6382167a6b19dec8c232f4094bb0",
            "target": {
                "file": "system/gd/hci/controller.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "169390077441406787667460558216511606847",
                "length": 1473
            },
            "id": "ASB-A-483126552-2a1d34b9",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e0894cd327af6382167a6b19dec8c232f4094bb0",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_br_process_pairing_command"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "151552568581576268611668179413873710378",
                "length": 2660
            },
            "id": "ASB-A-483126552-4c5537f3",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e0894cd327af6382167a6b19dec8c232f4094bb0",
            "target": {
                "file": "system/stack/smp/smp_act.cc",
                "function": "smp_proc_pair_cmd"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "232238903010028183038707700030782934541",
                    "14980032913998250867225121871288801237",
                    "253674015196116051108162116857993779890",
                    "55348888355425886011662540130877543889",
                    "254153141529478099434102282022194410481",
                    "61937011152875417911578862764959557376",
                    "116242353278372326626829934567422127450",
                    "179705134783929160089372176378212630285"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-52c14db1",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e0894cd327af6382167a6b19dec8c232f4094bb0",
            "target": {
                "file": "system/stack/btm/btm_sec.h"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "119542365830210534687802239827414224381",
                    "239337266044643681743188038503270321612",
                    "193044994870120047442220186648619386137",
                    "184912518881563867024044782986365543148",
                    "101350491261513703515988950443700571375",
                    "296650099045411394981616046689631900232",
                    "38272569658039269757009750315427877074",
                    "99637569060360202894404374414597787783",
                    "264729383410382451336090117739210080716",
                    "203419093967103059016682881030187876908",
                    "233246079668848868107251394685895054187",
                    "155996515602091671169357863027327512907",
                    "51690577158058870106773186319585672128",
                    "203419093967103059016682881030187876908",
                    "233246079668848868107251394685895054187",
                    "313841354888606081521688943906432826089"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-beaf6c76",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e0894cd327af6382167a6b19dec8c232f4094bb0",
            "target": {
                "file": "system/stack/btu/btu_hcif.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "158939321918854096489890619142036067291",
                "length": 840
            },
            "id": "ASB-A-483126552-c68a7da3",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e0894cd327af6382167a6b19dec8c232f4094bb0",
            "target": {
                "file": "system/stack/btu/btu_hcif.cc",
                "function": "read_encryption_key_size_complete_after_key_refresh"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "223686832906941518132862801260572790598",
                    "146883344000281372816597313367013526082",
                    "291607126589978296692164008483920165137",
                    "152498003252465324642574777168091341984",
                    "216745401857420517312531043344733948986",
                    "90838428996419478778671093826674660957",
                    "243196010163955082557022457785169536792",
                    "113212041184632025995212531598357727678",
                    "54469357391385370306153574358313886042",
                    "87420151342778965471377926056442457563"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483126552-cb95ae64",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e0894cd327af6382167a6b19dec8c232f4094bb0",
            "target": {
                "file": "system/stack/smp/smp_act.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "276483157191718912840828446527738908169",
                "length": 1356
            },
            "id": "ASB-A-483126552-fbf555ad",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e0894cd327af6382167a6b19dec8c232f4094bb0",
            "target": {
                "file": "system/stack/btu/btu_hcif.cc",
                "function": "read_encryption_key_size_complete_after_encryption_change"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483126552.json"